/**
 *
 *  Copyright (c) 2011, AstroDAbis
 *  All rights reserved.
 *
 *  Redistribution and use in source and binary forms, with or without modification,
 *  are permitted provided that the following conditions are met:
 *
 *      * Redistributions of source code must retain the above copyright notice,
 *        this list of conditions and the following disclaimer.
 *      * Redistributions in binary form must reproduce the above copyright notice,
 *        this list of conditions and the following disclaimer in the documentation
 *        and/or other materials provided with the distribution.
 *
 *  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
 *  ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 *  WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 *  IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
 *  INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
 *  BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 *  DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
 *  OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 *  OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 */
package org.jiscinvolve.astrodabis.barberry.control.login;

import javax.validation.Valid;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;

import org.springframework.stereotype.Controller;
import org.springframework.web.servlet.ModelAndView;
import org.springframework.web.context.request.WebRequest;
import org.springframework.web.context.request.RequestAttributes;

import org.springframework.web.bind.annotation.RequestMethod;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ModelAttribute;

import org.springframework.validation.FieldError;
import org.springframework.validation.ObjectError;
import org.springframework.validation.BindingResult;

import org.jiscinvolve.astrodabis.barberry.control.Paths;
import org.jiscinvolve.astrodabis.barberry.control.RequestData;
import org.jiscinvolve.astrodabis.barberry.control.BaseController;

import org.jiscinvolve.astrodabis.barberry.common.core.Account;

/**
 * Login controller
 *
 */
@Controller
@RequestMapping(Paths.LOGIN_PATH)
public class LoginController
extends BaseController
    {

    /**
     * Our debug logger.
     * 
     */
    private static Log log = LogFactory.getLog(LoginController.class);

    /**
     * Login view path.
     * 
     */
    public static final String FORM_VIEW = "login/login" ;

    /**
     * Form attribute name.
     * 
     */
    public static final String FORM_DATA = "form" ;

    /**
     * Create our RequestData for this request.
     *
     */
    @ModelAttribute(RequestData.MODEL_ATTRIB)
    public RequestData data(
        WebRequest request
        ){
        return new RequestData(
            request,
            womble,
            actor(
                request
                )
            );
        }

    /**
     * Get the login page.
     * 
     */
	@RequestMapping(method=RequestMethod.GET)
	public ModelAndView page(
	    @ModelAttribute(RequestData.MODEL_ATTRIB) RequestData data,
	    ModelAndView model
	    ){
        //
        // If already logged in, redirect to the home page.
        if (data.actor() != null)
            {
    		model.setViewName(
                data.redirect()
                );
            }
        //
        // If not already logged in, display the form page.
        else {
            model.addObject(
                FORM_DATA,
                new LoginForm()
                );
    		model.setViewName(
                FORM_VIEW
                );
            }
        return model ;
        }

    /**
     * Post the login form.
     * 
     */
	@RequestMapping(method=RequestMethod.POST)
	public ModelAndView post(
        @ModelAttribute(FORM_DATA) @Valid LoginForm form, BindingResult result,
	    @ModelAttribute(RequestData.MODEL_ATTRIB) RequestData data,
	    WebRequest request,
	    ModelAndView model
	    ){
        //
        // If already logged in, redirect to the user's page.
        if (data.actor() != null)
            {
    		model.setViewName(
                data.redirect(
                    data.actor()
                    )
                );
            }
        //
        // If not already logged in.
        else {
            //
            // If the input is not valid, re-display the form page.
		    if (result.hasErrors())
		        {
                log.debug("Input has errors");
                for(FieldError error : result.getFieldErrors())
                    {
                    log.debug("  Error [" + error.getObjectName() + "][" + error.getField() + "][" + error.getDefaultMessage() + "]");
                    }
        		model.setViewName(
                    FORM_VIEW
                    );
		        }
            //
            // If the input is valid.
            else {
                //
                // Try login to the users account.
                try {
                    //
                    // Check for a matching account.
                    Account account = womble.accounts().select(
                        form.getName()
                        );
                    //
                    // If we didn't find a matching account.
                    if (account == null)
                        {
                        result.addError(
                            new FieldError(
                                FORM_DATA,
                                "name",
                                "Login failed - do you need to register ?"
                                )
                            );
                		model.setViewName(
                            FORM_VIEW
                            );
                        }
                    //
                    // If we found a matching account.
                    else {
                        //
                        // Check the password matches.
                        if (account.login(form.getPass()))
                            {
                            //
                            // Add the Account ident to our session.
                            request.setAttribute(
                                SESSION_UID,
                                account.ident(),
                                RequestAttributes.SCOPE_SESSION
                                );
                            //
                            // Re-direct to the account page.
                    		model.setViewName(
                                data.redirect(
                                    account
                                    )
                                );
                            }
                        //
                        // If the password doesn't match.
                        else {
                            result.addError(
                                new FieldError(
                                    FORM_DATA,
                                    "pass",
                                    "Login failed"
                                    )
                                );
                    		model.setViewName(
                                FORM_VIEW
                                );
                            }
                        }
                    }
                //
                // Anything goes wrong, add an error and re-display the form page.
                catch (Throwable ouch)
                    {
                    log.error("Exception while retrieving user account [" + form.getName() + "][" + ouch.getClass().getName() + "][" + ouch.getMessage() + "]");
                    result.addError(
                        new ObjectError(
                            FORM_DATA,
                            "Oops, something went wrong. Please try again later"
                            )
                        );
            		model.setViewName(
                        FORM_VIEW
                        );
                    }
                }
            }
        return model ;
	    }
    }

